URLhaus Database

You are currently viewing the URLhaus database entry for http://etwowcharge.ro/wp-content/pjp9zkhw-7v1t6-4230/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:296994
URL: http://etwowcharge.ro/wp-content/pjp9zkhw-7v1t6-4230/
URL Status:Offline
Host: etwowcharge.ro
Date added:2020-01-24 10:17:35 UTC
Last online:2020-01-27 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-24 10:18:02 UTC to abuse{at}romarg[dot]com)
Takedown time:2 days, 23 hours, 45 minutes Poor (down since 2020-01-27 10:03:30 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-25invoice-GD23_439162216.docdoc 983ddd1518361a6f16f1b4f4980f9f8e195ab46794ddb14935f83c5a93781f17Virustotal results 41.27%Heodo
2020-01-25Inv-K84_49403724.docdoc ad9abb3285316befd3612fbaab1f07128a7a24e88aae192c62d60ef64e38c544Virustotal results 36.07% Heodo
2020-01-24INVOICE-664_6104624.docdoc d1a8632d5649ad116f4f6afb521b86b8820ddfe5857577cf7a01954e9195a7c2Virustotal results 36.51% 
2020-01-24invoice-1_651039986.docdoc f514a1b466096bf3207af00185674482d598f536c8bc2fb78216494aa14d3ce9Virustotal results 29.69% Heodo
2020-01-24INVOICE 2327_32985329.docdoc 4982421b347ca1f4b3ad1ffc6c6bbbef2ad9fb126ef18e2db576a1a5bdc39163Virustotal results 31.15% Heodo
2020-01-24Inv_SEKV80_54938290.docdoc e4db7e7349f371a879dc50766f710ecbe9764269b1cf58ad3e03468a7a5051dcVirustotal results 27.42% Heodo
2020-01-24Inv-AVFL037_1222485.docdoc 5fb2dfcdf3adab93649f266376b3b4f593dd1bb0dc4ef6dfcf3ba994f112b0a4Virustotal results 25.40% Heodo
2020-01-24Invoice-THH9197_09651757.docdoc 9e7cdaa56cdc7f791acec407618bda0eed9992a0adfe090208b17f472aed4119Virustotal results 27.42% Heodo
2020-01-24invoice-24_71728036.docdoc 8b2e4b7244319f99c6c6813e954f42c6f9580320d266b016e4752e25c56f812fn/a Heodo
2020-01-24Invoice_CK9_2536385.docdoc aad76c531a5fc6a8f9750aed8ebc418d0fa8c9aefa5c41906ea4512703493c04Virustotal results 25.40% Heodo